Cloud Security Engineer, Filevine

• If you are bright, hardworking, ambitious and enjoy taking ownership for security and compliance, we want to talk to you
• 3+ years combined in information technology/security with emphasis on network security. A BS in a technical field such as information security or computer science can be considered as supplementary experience
• Expertise with AWS and experience with either GCP or Azure cloud infrastructure security
• Strategize and outline goals and objectives to secure Cloud environments and Cloud applications while building the application security program
• Experience with scripting, development, and IaC languages (e.g., JavaScript, C++, Python, PowerShell)
• Ensure Filevine is following cloud security best practices for cloud environments
• Ensure appropriate cloud logging, monitoring and response efforts are in place to protect Filevine and our customers
• Strong history in advising and executing security architecture design and assessments
• Great degree of familiarity with designing and implementing secure Enterprise cloud networks
• Significant experience with SIEM and logging technologies
• Knowledgeable with Threat Hunting practices
• Experience with cloud hardening best practices
• Experience with both executing and defending network penetration tests
• Experience with container security for Windows & Linux operating systems
• Working knowledge of security requirements for SOC 2 Type I & II, FedRAMP, HIPAA, GDPR, CCPA and CJIS
• Significant experience with security engineering, incident response and security operations best practice
• Significant experience with orchestration and observability tools
• Strong Project Management experience
• A strong curiosity, initiative, persistence, and willingness to experiment to provide solutions to diverse technical challenges
• Expert knowledge with SOAR platforms and creating run books / play books
• Automation skills are a plus
• Strong team player and work ethic are essential

Desirable

• The Information Security team ensures security engineering efforts are effective and aligned with industry standards and best practices
• Filevine is looking for a Cloud Security Engineer to join our Information Security team to ensure that our platform, applications, and infrastructure are compliant and secured at the highest levels, thus protecting and enhancing customer trust
• Monitor cloud environments for security issues
• Strategize and outline goals and objectives to secure Cloud environments and Cloud applications while building the application security program
• Investigate security breaches and other cyber security incidents
• Install security measures and operate software/hardware to protect systems and information infrastructure, including firewalls and data encryption programs
• Document and research security breaches and assess the damage they cause
• Work with internal teams to perform tests and uncover network vulnerabilities
• Help remediate detected vulnerabilities to maintain high-security standards
• Stay current on cloud security trends and news
• Develop company-wide best practices for cloud security
• Research security enhancements and make recommendations to management
• Stay up to date on information technology trends and security standards